Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9832152DB0811EFB83A39B7762E951A.roa
File: D9832152DB0811EFB83A39B7762E951A.roa (raw, json)
Hash identifier: 4xkeafWYoEXUlVGnEQMPaRzQaTV+NSNkvNL/wfX97Ts=
Subject key identifier: 29:38:C7:BA:54:A5:7C:68:90:FB:A4:B9:C6:B5:C1:8E:8D:44:A8:26
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0111F3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9832152DB0811EFB83A39B7762E951A.roa
Signing time: Sat 25 Jan 2025 10:40:53 +0000
ROA not before: Sat 25 Jan 2025 10:40:49 +0000
ROA not after: Sun 23 Feb 2025 10:40:49 +0000
asID: 62240
IP address blocks: 45.192.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70131 (0x111f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 10:40:49 2025 GMT
Not After : Feb 23 10:40:49 2025 GMT
Subject: CN=6794bfb5-20aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:42:09:7c:57:a4:b8:b5:ad:21:2d:f8:b4:df:
4d:5a:03:40:90:0a:9c:9f:2d:d6:77:6a:94:f6:01:
00:99:ca:a2:44:26:70:54:23:6b:00:88:bc:ae:c5:
bc:9d:57:de:20:5b:41:9d:e7:6e:b5:b8:52:da:3b:
a7:a9:e5:cb:6d:bb:1b:39:77:47:83:0b:7c:73:20:
87:2e:85:43:3c:50:46:29:c7:9c:78:a5:5a:b4:fe:
01:bf:8e:31:b2:b6:f8:1f:18:fb:74:d9:bc:fd:d0:
90:12:48:4e:58:26:4b:59:d4:19:0c:3c:09:e2:06:
6d:69:d6:fb:75:1c:d7:1c:86:8b:d2:6c:d1:94:ad:
7e:53:92:5b:0a:c8:4f:47:53:3a:24:c2:14:f0:fc:
be:8b:1a:3c:4d:6f:74:93:50:89:f8:dc:b8:d1:dd:
d8:b5:41:ca:0c:a5:84:19:1d:d5:9f:29:87:5d:a5:
32:06:cd:8e:27:0b:c5:a3:d5:8f:31:c2:70:19:c2:
52:bd:1c:b4:44:f6:8d:7a:db:e0:80:06:64:2f:f3:
cb:10:f4:c6:9e:21:e1:ac:b1:40:67:50:a0:4f:f4:
b4:6f:ad:0a:5a:9b:af:91:03:a8:23:a3:5f:00:b2:
47:c0:05:7d:d0:38:08:60:dd:65:90:55:4d:d4:a0:
ce:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:38:C7:BA:54:A5:7C:68:90:FB:A4:B9:C6:B5:C1:8E:8D:44:A8:26
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9832152DB0811EFB83A39B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.46.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:58:89:72:8a:d4:0c:26:a7:62:d8:e5:c7:c4:15:e5:1d:45:
1f:f1:0c:85:32:8c:77:1c:bf:8d:5e:1a:4a:36:b5:af:78:3b:
54:4b:04:f6:f8:9a:b5:f3:18:51:0c:16:50:87:ad:a4:73:b7:
f7:38:82:c8:a6:d3:4a:87:2d:09:ba:b5:7a:99:a6:b3:b3:1d:
43:ca:5b:a8:ff:ad:52:e5:d2:bb:13:21:da:e2:02:20:2a:b9:
37:0b:f6:ad:05:c8:05:bc:c3:07:4e:e7:7e:e3:59:f2:c1:bc:
2a:6b:a2:f7:08:99:c9:07:85:29:17:0e:56:ab:7f:b1:8c:64:
7f:c1:43:4d:5c:d8:30:81:18:0a:72:1b:1f:60:1d:90:31:de:
e4:48:6b:d8:09:04:1e:82:75:4b:78:a0:b1:b1:e5:df:84:df:
ff:43:06:dc:bb:15:92:d3:e2:b8:11:a4:46:4c:64:ed:a4:81:
d5:d0:d8:ea:67:85:6d:da:20:e3:c0:1f:f0:8c:84:84:6c:e0:
22:a5:44:8d:57:e4:c7:77:3f:cd:96:b2:90:a3:4c:89:b1:1a:
5c:28:36:fa:43:bb:b4:0f:67:e8:2f:45:fe:fe:49:fd:61:70:
ef:79:97:fa:05:7c:a8:25:36:78:66:e5:e5:7e:a0:fb:f6:ff:
66:63:fc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:33:36 2025 by rpki-client